Lucene search

[email protected]CVE-2003-1101

HistoryMar 11, 2005 - 5:00 a.m.

CVE-2003-1101

2005-03-1105:00:00

[email protected]

web.nvd.nist.gov

cve-2003-1101

hummingbird cyberdocs

info disclosure

remote attack

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

JSON

Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials, which reveals the path in an error message.

Affected configurations

NVD

Node

hummingbirdcyberdocsMatch3.5.1

hummingbirdcyberdocsMatch3.9

hummingbirdcyberdocsMatch4.0

CPENameOperatorVersion
hummingbird:cyberdocshummingbird cyberdocseq3.5.1
hummingbird:cyberdocshummingbird cyberdocseq3.9
hummingbird:cyberdocshummingbird cyberdocseq4.0

CPE	Name	Operator	Version
hummingbird:cyberdocs	hummingbird cyberdocs	eq	3.5.1
hummingbird:cyberdocs	hummingbird cyberdocs	eq	3.9
hummingbird:cyberdocs	hummingbird cyberdocs	eq	4.0

References

secunia.com/advisories/9985

www.kb.cert.org/vuls/id/715548

www.procheckup.com/security_info/vuln_pr0303.html

www.securityfocus.com/bid/8816

exchange.xforce.ibmcloud.com/vulnerabilities/13398

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

JSON

Related for CVE-2003-1101

nvd1 cvelist1